Skip to content
OpenAdvisories

Product · WorkDo

eCommerceGo SaaS

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 5.1
    CVE-2025-40978

    Multiple vulnerabilities in WorkDo products

    Stored Cross-Site Scripting (XSS) vulnerability in WorkDo's eCommerceGo SaaS, consisting of a stored XSS due to a lack of proper validation of user input by sending a POST request to ‘/ticket/x/conversion’, using the ‘reply_description’ parameter.

    WorkDo eCommerceGo SaaS
  • Medium 5.1
    CVE-2025-40977

    Multiple vulnerabilities in WorkDo products

    Stored Cross-Site Scripting (XSS) vulnerability in WorkDo's eCommerceGo SaaS, consisting of a lack of proper validation of user input by sending a POST request to ‘/store-ticket’, using the ‘subject’ and ‘description’ parameters.

    WorkDo eCommerceGo SaaS